thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Intermediate

CodeQL

GitHub's semantic code analysis engine that queries code like data to find security vulnerabilities, used for code scanning.

Definition

CodeQL builds a database from source code and runs queries for vulnerability patterns. Results appear as code scanning alerts on pull requests and in the Security tab. It is free for public repositories and part of GitHub Advanced Security for private ones.

Example

The default setup enables CodeQL scanning for Python and JavaScript on each pull request.

Exam tip

CodeQL is GitHub's SAST engine.

Related terms